Golden Cup

MITRE ATT&CK: S0535 View on attack.mitre.org

Aliases: Golden Cup

Malware type
spyware
Family
Malware family
Operating systems
android
Related IoCs
1 (1 malicious)
Last IoC activity
2026-08-29 00:53:10
Profile updated
2026-07-07 15:28:21

Targeted industries: media-and-entertainment retail-and-hospitality

Context

Golden Cup is Android spyware that has been used to target World Cup fans.

Recent IoC activity

1 malicious indicator in Maltiverse are attributed to Golden Cup (S0535). The 1 most recently updated:

TypeIndicatorUpdatedSources
file sample 166f3a863bb2b66bda9c76dccf9529d5237f6394721f46635b053870eb2fcc5a 2026-08-29 2

Malware & tools used

  • System Information Discovery (attack-pattern)
  • Download New Code at Runtime (attack-pattern)
  • Audio Capture (attack-pattern)
  • Web Protocols (attack-pattern)
  • Video Capture (attack-pattern)
  • System Network Configuration Discovery (attack-pattern)
  • Data from Local System (attack-pattern)
  • Location Tracking (attack-pattern)
  • Contact List (attack-pattern)
  • File and Directory Discovery (attack-pattern)
  • SMS Messages (attack-pattern)
  • Archive Collected Data (attack-pattern)
  • Software Discovery (attack-pattern)

Reports & references

  • MITRE ATT&CK — S0535 (report)
  • Broadcom/Symantec — Goldencup New Cyber Threat Targeting World Cup Fans (report)

External references